
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
File: oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json)
Hash identifier: /GbCRKSy2QuRlR5HZBTqYxY9J3SHotq0KuBptmEBiXs=
Subject key identifier: A3:AC:D6:84:3E:B5:5D:3D:80:37:42:B3:8C:B4:35:F6:D9:45:33:D7
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial: 0594
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
Manifest number: 0583
Signing time: Sat 04 Apr 2026 23:04:09 +0000
Manifest this update: Sat 04 Apr 2026 23:04:09 +0000
Manifest next update: Sat 11 Apr 2026 23:04:09 +0000
Files and hashes: 1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: nTjdtMJGC0zLciK+kVpIXFqPijtdQ+1tgb8evJDA4MU=)
2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: 5d1XnWQ6pR76M6L2odGawB/ntn61DTd/opa315TiVjw=)
3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: 9NLlN3W75sGcxpsbJYQQO4z8VLfzpHn4F0TnxLk1jJo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1428 (0x594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E83FE, serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Validity
Not Before: Apr 4 23:04:09 2026 GMT
Not After : Apr 11 23:04:09 2026 GMT
Subject: CN=69d198e9-47bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d4:13:96:1f:da:9d:56:ed:37:6c:b1:97:e4:
4f:87:e1:88:7e:6e:99:2c:72:7c:0d:69:62:a5:a8:
40:9f:a0:ba:e0:55:5e:fa:c3:a9:c8:9b:e4:12:68:
99:1d:74:bd:c7:1b:f9:67:3c:aa:b6:7b:f0:f4:0e:
28:45:87:bb:e7:2e:e0:32:dc:36:a0:1a:3c:83:52:
6e:b7:dd:e3:a5:30:a8:3d:1d:99:0f:47:4f:5e:58:
a2:72:cb:82:17:4a:20:7a:c7:10:3a:f4:f4:53:76:
82:e5:58:1e:a5:f6:92:16:c9:c1:9a:fa:ce:9b:d8:
02:2c:52:9a:d1:1c:7a:d0:6c:e1:7c:97:18:6a:d8:
24:7d:ab:57:2f:99:d1:2a:09:2c:f0:17:c4:96:22:
46:7f:98:5f:f7:1f:2a:6c:9f:a8:42:d5:ee:e2:1a:
37:b6:57:c2:b8:4e:5f:fe:03:5c:89:ef:0b:c9:73:
30:fe:fd:f6:8c:e9:b4:24:1d:c8:20:c5:eb:a3:fa:
f9:e1:48:ca:d4:51:2b:26:78:1c:9c:1d:fe:e1:a4:
b3:b6:8b:a6:8c:de:65:36:76:2b:05:d9:a9:71:e4:
6f:1a:05:45:02:7e:a7:62:b3:1b:8d:c3:ce:0e:78:
e4:dc:47:bb:7b:ca:57:cc:83:b2:47:2e:b6:b7:e5:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:D6:84:3E:B5:5D:3D:80:37:42:B3:8C:B4:35:F6:D9:45:33:D7
X509v3 Authority Key Identifier:
keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:02:e7:3d:b6:e7:bd:2c:eb:c6:86:f1:7a:3e:dd:b4:f0:06:
21:54:04:aa:12:06:7d:01:e2:9e:3c:93:f2:93:c6:31:44:2e:
6b:28:90:a2:2a:a3:61:5a:93:5a:ef:ff:12:82:57:52:07:99:
bb:95:fa:39:9d:a2:62:8b:b9:4e:20:ff:72:f7:ec:14:fa:31:
09:f3:af:78:24:79:7d:9a:7b:65:6a:77:44:0b:2e:d6:dc:26:
38:6d:0d:9a:98:9c:6b:fe:27:b3:d1:86:43:45:bb:11:1d:9a:
41:c4:77:58:78:4f:b5:aa:27:94:01:76:8c:ff:1c:e5:65:e8:
35:b3:33:ac:36:f9:af:38:f7:59:01:76:71:69:cc:db:1d:9a:
ee:31:69:13:ab:0e:5e:63:0d:05:ed:30:4c:0c:51:b4:ee:76:
4e:82:36:1b:40:0a:0e:91:b3:ea:b0:4c:0e:fe:26:d6:24:90:
9d:6c:fb:88:12:9a:73:50:f0:32:41:80:3c:a9:52:c3:a8:ee:
c0:26:b0:26:34:99:89:46:0f:64:3f:c0:9f:c6:4c:33:13:75:
4e:35:2f:7c:74:34:75:87:40:3f:4e:b7:a6:42:ed:d1:35:90:
da:43:05:85:8f:0d:2b:00:5d:5c:43:34:54:bf:75:fa:44:0b:
37:30:51:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:36 2026 by rpki-client